$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: ZMsSfzG1+PJVHATTUVdxvNo+Y6REaVvPFAFieaB4l1c= Subject key identifier: 4C:E0:F0:A8:EC:D3:7D:79:75:79:C7:BE:B9:BB:06:7C:13:3D:2C:F8 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 44BCEAA8A09DED90E96DF51D6CC315C142FA750B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 013F Signing time: Thu 26 Mar 2026 01:19:30 +0000 Manifest this update: Thu 26 Mar 2026 01:14:30 +0000 Manifest next update: Fri 27 Mar 2026 05:01:30 +0000 Files and hashes: 1: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 2: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 3: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 4: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 5: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: CBLT/iKh/5LpKd2iBYDjOfmZM4/uTvxV7l7vzbh/oh4=) 6: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 7: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 8: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 9: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 10: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 11: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 12: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 13: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 14: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 15: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 16: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 17: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bc:ea:a8:a0:9d:ed:90:e9:6d:f5:1d:6c:c3:15:c1:42:fa:75:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Mar 26 01:14:30 2026 GMT Not After : Mar 27 05:01:30 2026 GMT Subject: CN=4CE0F0A8ECD37D797579C7BEB9BB067C133D2CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:fb:9a:c5:fa:01:4f:02:af:c2:41:b3:ad: 88:34:4d:49:d2:3d:5a:b5:59:67:e7:ae:73:cd:05: 5a:4b:e6:6e:34:5e:03:61:18:4b:a6:20:74:03:92: b2:46:3f:c2:13:fa:cb:10:21:51:88:d4:22:20:94: e4:a2:37:bb:3b:b3:12:5b:8f:d8:33:bf:c6:ff:1b: 64:14:78:b3:ef:b3:76:94:f9:23:7b:fc:3f:1a:bc: 59:9c:b5:bb:eb:4a:7c:7c:c0:1a:9b:39:6d:b9:36: 91:c8:a3:b3:d0:bf:b9:fe:6c:a8:dc:e2:b5:56:93: f4:06:30:c4:99:79:47:b7:df:e3:c8:f9:81:65:b8: fb:6c:8a:a5:6c:1a:20:36:27:d7:4d:ba:49:0b:e6: db:03:41:9c:d8:07:bd:e2:ef:ce:c5:26:83:d7:bd: 69:ab:0e:79:87:e4:2b:97:ac:24:40:06:f5:3f:ab: 3d:c6:5a:c8:35:fc:79:8f:8f:0b:ef:b5:dc:70:73: b1:5b:75:5c:a8:a9:14:1a:64:af:ab:ea:a1:bb:18: 67:5d:20:bd:23:20:84:f4:70:5a:70:8c:02:6b:9d: f9:e1:6b:ae:c0:4b:0d:aa:20:34:c4:76:3f:ba:10: 01:19:56:02:40:1c:fc:91:f3:49:50:0b:9d:04:0d: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:F0:A8:EC:D3:7D:79:75:79:C7:BE:B9:BB:06:7C:13:3D:2C:F8 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f0:7a:43:bd:4d:15:08:1e:5c:5e:5d:25:b6:b5:fd:d4:b6: b6:e2:f8:4f:67:6a:db:b2:58:4a:cd:14:3e:73:a9:43:1f:d2: 9a:6d:27:f4:0d:6e:10:4a:92:2e:9f:eb:dd:54:46:db:e3:e8: ba:8e:be:06:da:b1:d9:08:16:ff:e6:1c:d2:4a:ac:c8:c6:9a: 19:28:7a:40:84:15:24:90:85:d6:80:2b:1f:12:1f:87:74:1b: e6:9b:c7:27:57:f8:e3:f6:39:79:cb:c5:74:19:36:b8:09:c3: 32:aa:b1:14:71:a3:61:35:0b:2c:65:20:a8:4f:cf:dd:43:bc: 22:da:c7:00:9c:79:fe:52:13:95:0f:34:81:ea:c4:52:83:ad: ec:55:59:05:ed:3e:ce:fc:55:15:8b:f2:50:81:f5:ce:89:f6: c9:56:bd:f0:8a:43:f7:3e:98:38:3d:4c:36:e5:c2:d2:f0:65: bd:bd:ad:a4:4c:19:e0:cb:73:58:8a:e3:f5:ce:6a:8e:9b:ef: 78:63:97:9a:8b:36:c4:b9:63:68:5a:af:7a:44:a8:24:25:b6: 61:34:f9:47:9c:cb:cf:7d:81:f7:59:50:d6:0b:c1:c8:72:2c: be:5d:82:dd:f6:61:b1:85:ff:9c:b3:0d:51:34:92:56:82:84: 91:7e:fd:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURLzqqKCd7ZDpbfUdbMMVwUL6dQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjAzMjYwMTE0MzBaFw0yNjAzMjcwNTAxMzBaMDMxMTAvBgNV BAMTKDRDRTBGMEE4RUNEMzdENzk3NTc5QzdCRUI5QkIwNjdDMTMzRDJDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjPuaxfoBTwKvwkGzrYg0TUnS PVq1WWfnrnPNBVpL5m40XgNhGEumIHQDkrJGP8IT+ssQIVGI1CIglOSiN7s7sxJb j9gzv8b/G2QUeLPvs3aU+SN7/D8avFmctbvrSnx8wBqbOW25NpHIo7PQv7n+bKjc 4rVWk/QGMMSZeUe33+PI+YFluPtsiqVsGiA2J9dNukkL5tsDQZzYB73i787FJoPX vWmrDnmH5CuXrCRABvU/qz3GWsg1/HmPjwvvtdxwc7FbdVyoqRQaZK+r6qG7GGdd IL0jIIT0cFpwjAJrnfnha67ASw2qIDTEdj+6EAEZVgJAHPyR80lQC50EDS3LAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTODwqOzTfXl1ece+ubsGfBM9LPgwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn8HpD vU0VCB5cXl0ltrX91La24vhPZ2rbslhKzRQ+c6lDH9KabSf0DW4QSpIun+vdVEbb 4+i6jr4G2rHZCBb/5hzSSqzIxpoZKHpAhBUkkIXWgCsfEh+HdBvmm8cnV/jj9jl5 y8V0GTa4CcMyqrEUcaNhNQssZSCoT8/dQ7wi2scAnHn+UhOVDzSB6sRSg63sVVkF 7T7O/FUVi/JQgfXOifbJVr3wikP3Ppg4PUw25cLS8GW9va2kTBngy3NYiuP1zmqO m+94Y5eaizbEuWNoWq96RKgkJbZhNPlHnMvPfYH3WVDWC8HIciy+XYLd9mGxhf+c sw1RNJJWgoSRfv2M -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:50 2026 by rpki-client